TheOnsiteManager Has Met Its AML/CTF Obligations. Tranche 2 Reporting Entities Now Face the Same Burden as Banks.

From 1 July 2026, Australia’s anti-money laundering and counter-terrorism financing laws stopped being a banking problem and became a property problem. Real estate professionals who broker the sale, purchase or transfer of real estate are now AUSTRAC reporting entities — the same legal class as banks, remittance providers and casinos. That is Tranche 2, and it is already in force.

TheOnsiteManager.com.au has met its customer due diligence obligations under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 by integrating VERIFII.au, an AUSTRAC-compliant identity verification service (Compliance No. 244209098), directly into the platform. VERIFII has replaced the former 2Apply system. Buyers, sellers, landlords, tenants and applicants can now be verified inside the same workflow operators already use to list, sell and let property.

The same regulatory burden as a bank — without a bank’s budget

For two decades, banks absorbed the cost of enrolment, written AML/CTF programs, initial and ongoing customer due diligence, beneficial-ownership mapping, sanctions and PEP screening, suspicious matter reporting and seven-year record keeping. Those controls were expensive because they were designed for institutions with compliance departments.

Tranche 2 dropped that architecture onto agencies, resident letting agents, buyers’ agents, developers and anyone else who provides a designated real estate service. AUSTRAC’s own summary is blunt: enrol, build a tailored program, identify and verify customers, report certain activity, and keep the records. Enrolment for newly regulated services was due within 28 days of commencement — typically 29 July 2026. In late August, AUSTRAC began issuing section 167 notices to businesses that appear to be providing designated services without having enrolled.

The cost is not theoretical. A reporting entity must appoint a compliance officer, risk-assess its customers and services, train staff, pay for verification technology, and be ready to lodge a suspicious matter report without tipping the customer off. That is bank-grade process imposed on businesses that used to complete a listing appointment with a driver’s licence photocopy and a handshake.

Which listings and parties are captured

The designated service is brokering the sale, purchase or transfer of real estate. Both the seller (or transferor) and the buyer (or transferee) are customers of the same reporting entity. It applies to residential and commercial property. It applies whether or not money changes hands. Ordinary leases of 30 years or less and general property management sit outside the AML/CTF real estate service — but the sale of the underlying asset does not.

That means customer due diligence is required on:

• vendors and purchasers on sales listings
• buyers and sellers of management rights, where the transaction transfers an interest in real estate and an operating business
• individuals acting in their own name
• companies and other corporations, including directors and anyone who owns or controls 25 per cent or more
• trusts, including family trusts and SMSFs — typically the trustee, and where relevant the appointor, beneficiaries and corporate-trustee controllers
• beneficial owners standing behind residential or commercial property held through vehicles rather than in a personal name

If the customer is a legal person, identifying the natural person who ultimately owns or controls it is not optional. That is the point of the reform. Criminals do not buy towers in their own name.

The price of getting it wrong

AUSTRAC can seek civil penalty orders, accept enforceable undertakings, issue infringement notices and give remedial directions. For the most serious contraventions, a civil penalty can reach 20,000 penalty units for an individual and 100,000 penalty units for a body corporate. From 1 July 2026 a penalty unit is $364, which puts the statutory ceiling at about $7.28 million for an individual and $36.4 million for a company. Tipping off a customer that a suspicious matter report has been, or may be, made is a criminal offence.

Those figures are why “we’ll get to it later” is no longer a strategy. AUSTRAC has said there will be no excuses for wilful non-compliance.

Rentals are out of AML/CTF — they are not out of the law

Customer due diligence under the AML/CTF Act is not, of itself, a designated-service obligation for ordinary residential tenancies. That is the carve-out the industry fought for, and it matters.

It does not mean identity work on the rental book is optional. Licensed property agents and resident letting agents in Queensland still operate under the Property Occupations Act 2014 and its regulation. Before an agent lists or deals, they must take reasonable steps to confirm they are acting for the person who actually owns the property — a safeguard against fraud that long predates Tranche 2. Landlords appointing an onsite manager, applicants seeking a tenancy, and tenants being placed into occupation all sit inside that professional duty to know who is on the other side of the appointment.

Separately, Queensland tenancy law still requires identity to be established as part of a rental application, with strict limits on what can be requested, copied and kept. The AML/CTF Act did not repeal those rules. It just declined to duplicate them. An onsite manager who treats “rentals are exempt” as “we don’t need to know who anyone is” is reading the wrong statute.

One workflow: buyers, sellers, landlords, tenants, applicants

VERIFII exists to collapse that split-screen compliance problem. Sales and management-rights transactions need AUSTRAC-grade CDD on individuals, companies, trusts and beneficial owners. Lettings still need a lawful, auditable way to identify landlords, applicants and tenants without running a second, disconnected stack.

Because VERIFII is built into TheOnsiteManager, operators no longer park a listing in one system and an application in 2Apply. The same platform that carries the marketplace now carries the verification. A manager can complete the check the law actually requires for the job in front of them — sale, purchase, management rights, trust or company vendor, beneficial owner, landlord appointment, or rental applicant — without exporting personal information into a parallel tool.

That is how TheOnsiteManager has met its CDD and AML/CTF obligations: not with a PDF policy in a drawer, but with an AUSTRAC-compliant verification service sitting where the work already happens.